Security Enhancements | Migrate to the Updated Policies

Hello everyone,

Zoho Directory's security policies have been updated and reorganized into three new policies with features that enhance the overall organization security. These policies provide a stronger and more secure sign-in methods and improve the user authentication experience.

Earlier, security policies comprised four dedicated components: Password Policy, Multi-Factor Authentication (MFA), Allowed IPs, and Advanced Settings. Based on these components, each group was assigned a policy that determined their sign-in process. Depending on their roles and responsibilities, the sign-in method varied and upon successful authentication, users were granted access to Zoho Directory.

With the latest update, the policies are divided into three parts: Conditional Access Policies, Routing Policies, and Security Policies.

1. Routing Policies acts as an initial check when a user signs in. 
   
2. Conditional Access Policies determines whether the user's access should be allowed or denied based on the predefined criteria.
   
3. Security Policies provide you with a dedicated Password Policy and Session Settings.
   

Additionally, Custom Authentication has been renamed and is now a part of Routing Policies.

New Policies:

Conditional Access Policies | Routing Policies | Security Policies

To understand how your existing policies are handled and mapped to the new policies during the migration process, click here.

Before migrating to the updated policies, quickly review how the policies are changed.

Existing Policies	Updated Policies
Password Policy	Security Policies Password Policy is a part of Security Policy. Learn more.
Multi-Factor Authentication (MFA)	Conditional Access Policies Multi-Factor Authentication (MFA) is a part of Conditional Access Policies. MFA acts as an Action (Allow with MFA) under this policy. Learn more.
Allowed IPs	Conditional Access Policies Allowed IPs is a part of Conditional Access Policies. It acts as a condition (IP address) under the policy. Learn more.
Advanced Settings 1. WEB SESSION MANAGEMENT 2. LOCK PERIOD SETTINGS	1. Routing Policies Session Lifetime and Idle Session Timeout are a part of Session Settings under Routing Policies. Learn more. 2. Security Policies Concurrent Sessions, and Lock Period Settings are a part of Advanced Settings under Security Policies. Learn more.
Custom Authentication	Routing Policies This section is renamed as Identity Providers and can be enabled via Routing Policy. Learn more.

How to Migrate?

Existing users with pre-configured policies will come across the Migration Page, which guides them through reviewing, resolving the conflicts and adopting the new policies. On this page, you will be required to complete the steps before migrating.

1. Demo: Watch a quick demo to understand what’s changed and updated.
   
2. Read the Changes: View a detailed document that outlines all the updates.
   
3. New Admin Role: Configure the new admin role to replace the existing Helpdesk Admin role as it will no longer have permission to manage security operations.
   Note: This section is displayed only if at least one user is assigned to the Helpdesk Admin role.
   
4. Custom Admin Role: Review the changes in the custom roles. 
   
   Note: This section is displayed only if a custom security role has been created and assigned to a user.
5. Sandbox Mode: Preview the updated policies in sandbox mode before migrating

After completing these steps, you can proceed with migrating to the updated security policies.

FAQs

1. What happens if I don't migrate? 
   You can continue using the existing security policies (old version) until you migrate to the updated policies.
   
2. What will happen to my existing policies? 
   Your existing security policy configurations will be migrated to the new policy framework. To understand how your existing policy setup is mapped to the updated policies, click here.
   
3. Who can perform this migration? 
   Only the Organization Owner or Organization Admin can perform the migration.
   

Regards,

The Zoho Directory Team.

• Topic Participants

• Reena Rai N

  

• Recent Topics

• Cooling-off Period Just Got Better: More Coverage, More Control

  We’ve enhanced the Cooling-off Period feature in Zoho Recruit to give you more control over repeat applications and referrals. This helps you maintain a cleaner, more efficient recruitment pipeline. With this enhancement, you can: Prevent duplicate candidate

• Revenue Management: #7 Revenue Recognition in Construction & Real Estate Industry

  If you are in the construction or real estate business, you are used to long project timelines and progressive invoicing to keep up with your billing. But when does revenue get recognized? Will it happen when the contract gets signed? At different milestones

• TikTok (and other social platform) Messages and comments of the past

  When I link a social channel, Zoho will show in "Inbox", "Messages" and "Contact" sections the interaction done in the past? (comment, messages...)

• Restrict Employee mail deletion

  Dear Zoho, Is there a way where i can restrict my employees to delete any mails from their account

• 554 5.1.8 Email Outgoing Blocked.

  Hi guys, I just singed up for mateusz.nowicki@zoho.com mail and I can't send any mails.. Why? Everytime I try to send something I got error like the one in the screenshot. Please, help me.

• File Upload in Creator's Subfrom

  Hello Sir/Madam, Here is a Problem......... Scenario: In CRM One Custom Module (Payments) have one File Upload Field now we have to Upload that File into Creator's Custom Form (Documents) have one Subform (Documents) in Document Upload Field using Deluge

• Trigger workflow base on email clic

  Searching the help and forum, I see that there were workflow trigger rules based on email. But now, I can't find this type of trigger when I create a custom workflow. What I'm looking for would be to automate the sending of an email for a new prospect,

• Bigin Form Acknowledgement

  How to troubleshoot and find out why form acknowledgement is not sending emails after form submission?

• Zoho Mail POP & IMAP Server Details

  Hello all! We have been receiving a number of requests regarding the errors while configuring or using Zoho Mail account in POP/ IMAP clients. The server details vary based on your account type and the Datacenter in which your account is setup. Ensure

• Ever since the new Android App udpates notifications are not working

  notifications are not working for the app is its closed I followed the tutuorial to the notificaction fixed and everythig seems to be right but notifications are not workig

• Zoho Analytics & Zoho Desk - but not all desks

  I have several desks in our company and one of those is used by our HR department. I want to bring through the data to the shared Zoho Analytics workspace - except for the HR desk. Can this be excluded at data import stage ?

• Incoming Emails Not Showing Up in Zoho Inbox

  Hi - I have my Zoho email account set up to forward a copy of all incoming emails to a secondary Gmail address, whilst retaining the original email in the Zoho inbox. However, all my incoming emails are currently not showing up in my Zoho inbox, so I'm

• SHEET - Send email when a cell changes

  I would like to create a custom function for Zoho Sheet that triggers when a paticular cell changes to a specific value. This would result in sending an email to a recipient (this would be an address that remains the same and included in the script). Example: = IF(N4= "Drafted", <>EmailFunction) 1)     Cell N4 changes to "Drafted" 2)    Email is sent to recipient            or alternatively 3)    Post to chat channel I have found the Custom function editor in Sheet. I am not bad at scripting, but

• 【開催報告】 福岡 ユーザー交流会 2025/8/8（金）

  皆さま、こんにちは。コミュニティチームの中野です。 8/8（金）に、福岡 ユーザー交流会を開催しました。 本投稿では、その様子をお届けします。当日の登壇資料などもこちらに共有しますので、参加できなかった皆さまもご参照ください。 今年初の開催となる福岡 ユーザー交流会では、CreativeStudio樂合同会社 前田さんによるZoho CRM / Sign / Survey の事例セッションのほか、 Zoho社員セッションでは、Zoho Forms の活用法を解説。 さらに、「見込み客・顧客データの管理/活用方法」をテーマに参加者同士でZoho

• Error: Invalid login: 535 Authentication Failed

  I have used zoho with nodemailer. const transporter = nodemailer.createTransport({ host: 'smtp.zoho.com', port: 465, secure: true, auth: { user: 'example@example.com', pass: 'password' } }); While sending the mail, it shows the following error: Error:

• Zoho Renewal

  Hello, If I am not going for zoho email renewal. will i get back my free zoho account? and if yes then is it possible to get back my all free user. how many user get back 10 or 25?

• Not reciving emails

  Apparently i cannot recive emails on my adress contact@sportperformance.ro I can send, but do not recive. The mail i'm trying to send from mybother adress gets sent and doesn't bounce back... but still doesn't get in my inbox. Please advise

• Not receiving MailChimp verification e-mail

  It seems that their verification e-mails are blocked. I can receive their other e-mails, but not their verification of domain ownership e-mail. I've checked and double checked how I typed the e-mail, using different e-mails (my personal e-mail can receive it), white listing the domain and all that is left is for the IP's to be white listed, but I don't have that power.  If a staff member could take a look at this -> http://mailchimp.com/about/ips/ And perhaps white list them for me, that would be

• Creating my 2nd email account

  After creating my first email address, I decided to get another email address. I would like to use this new address as the primary address too. I don't know how to set it up there doesn't seem to be an option for that

• Cannot - create more email account - Unusual activity detected from this IP. Please try again after some time

  Hello, I come across the error message in Control Panel. Unusual activity detected from this IP. Please try again after some time and i cannot create any more users We are an IT company and we provide service for another company Please unlock us.

• "Unable to send message;Reason:553 Relaying disallowed. Invalid Domain"

  Good day. When I try to send mail through ZOHO mail I get the following error : "Unable to send message;Reason:553 Relaying disallowed. Invalid Domain" I need help with this. My zohomail is : @eclipseweb.site Thank you,

• Transfert de domaine pour création des comptes emails

  Bonjour , je ne parviens point à créer des mails avec le domaine 'raeses.org' suite à la souscription du domaine auprès d'un autre hébergeur, dont j'ai fait la demande du code de transfert qui est le suivant : J2[U8-l0]p8[ En somme, attente de l'activation

• Help! Unable to send message;Reason:554 5.1.8 Email Outgoing Blocked.

  Kindly help me resolved this issue that i am facing here.

• How are people handling estimates with Zoho inventory?

  We are often using Zoho Books for estimates that then get converted to invoices within Books. We would like the sales team to migrate entirely to Zoho Inventory and no longer need to use Zoho Books so that they are only on one system. How are people managing

• Relative Date Searches

  Currently in the search options, it has "date", "from date" and "to date". I think it would be great if there were options like "date greater than x days ago" and "date less than x days ago". I realise that as a once off you can just use the existing

• Ask the Experts 23: Customize, utilize, and personalize with Zoho Desk

  Hello everyone! It's time for the next round of Ask the Experts (ATE). This month is all about giving Zoho Desk a complete makeover and making it truly yours. Rebrand Zoho Desk with your organization’s details, customize ticket settings based on your

• Please review and re-enable outgoing emails for my domain

  Hello Zoho Support, I have recently purchased a new domain and set up email hosting with Zoho. However, my account shows "Outgoing Email Blocked". I am a genuine user and not sending bulk/spam emails. Please review and re-enable outgoing emails for my

• Payroll without tax integrations (i.e. payroll for international)

  It seems as though Zoho waits to develop integrations with local tax authorities before offering Zoho Payroll to Zoho customers in a country. Please reconsider this approach. We are happy Zoho Books customers, but unhappy that we have to run payroll in

• goingout e mail block

  info@ozanrade.com.tr

• Incoming mails blocked

  Zoho User ID : 60005368884 My mail Id is marketing#axisformingtechnology.com .I am getting following message "Your Incoming has been blocked and the emails will not be fetched in your Zoho account and POP Accounts. Click here to get unblocked." Please

• Configuring Email Notifications with Tautulli for Plex

  Hi I'm new to Zoho. I am from Canada and I have a I use a web based application called Tautulli for Plex that monitors my Plex media server. It also sends a newsletter to my followers. To set this up they require a "From" email address., a smtp server

• How to Set Up Zoho Mail Without Cloudflare on My Website

  I'm having some trouble with Cloudflare here in Pakistan. I want to configure Zoho Mail for my domain, but I'm not sure how to set it up without going through Cloudflare. My website, https://getcrunchyrollapk.com/ , is currently using CF, but I'd like

• Spam is Being Forwarded

  I am filtering a certain sender directly to the Trash folder. Those messages are still being forwarded. Is this supposed to happen?

• IMAP Block

  My two accounts have been blocked and I am not able to unblocked them myself. Please respond to email, I am traveling and this is urgent.

• "DKIM not configured"

  Hello. I have been attempting get the DKIM verified but Toolkit keeps sending the message that it is not configured, but both Namecheap and Zoho show it as configured properly. What am I missing?

• Zoho mail with custom domain not receiving email

  i registered zoho mail with my own domain. I can login and access the mail app. I tried to send email from an outlook email account and an icloud email account. Both emails were not received. My plan is free. I also tried to send email from this zoho

• A Sales Ebook to help Sales representatives increase Sales.

  I worked in sales for twenty years with the same company. I was an outdoor sales representative selling health insurance. My first Year I made it into the company's President's club. I wrote an Ebook sharing how I was able to achieve success in sales

• Waterfall Chart

  Hello, I would like to create a waterfall chart on Zoho analytics which shows the movement in changes of budget throughout a few months, on a weekly basis. Should look something like the picture below. Does anyone know how to?

• Issue with Importing Notes against Leads

  Hi, I am attempting to import some Notes into Zoho CRM which need to be assigned to various Leads. I have created a csv file which I am testing that contains just one record. This csv file contains the following columns: Note Id Parent Id       (I have

• Option to Hide Project Overview for Client Profiles

  In Zoho Projects, the Project Overview section is currently visible to client profiles by default. While user profiles already have the option to restrict or hide access to the project overview, the same flexibility isn’t available for client profiles.

• Next Page